$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9787dda9-9271-309a-9152-58bbbdcc1f7d.roa File: 9787dda9-9271-309a-9152-58bbbdcc1f7d.roa (raw, json) Hash identifier: FMgIBV7ZM8MLD6HSOGrV8QXOUHq0KcePOJFGb9U1u3U= Subject key identifier: 76:BB:6C:B7:16:A8:AE:60:8F:69:76:2E:3A:EC:B4:A5:F1:AA:A1:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA79ADBBC8ED5047DCB813080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9787dda9-9271-309a-9152-58bbbdcc1f7d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 108.59.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:db:bc:8e:d5:04:7d:cb:81:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7fcc6a7-c243-4588-b020-646f56daa69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:ed:bf:11:03:68:e2:2c:52:f2:4f:a5:14: c4:bf:66:79:a7:50:9d:e8:ca:e5:13:7a:46:c5:6e: 10:36:4a:d2:d2:a6:d0:e5:77:f5:a5:96:e8:db:85: 61:44:03:45:d8:34:2b:c2:4d:5e:3c:9f:03:f9:c3: 25:ea:6f:0f:f6:0e:3e:ac:1e:27:ad:d2:a3:2d:08: 0e:70:cc:d4:ee:eb:c8:bb:88:66:28:a9:63:5e:3e: d9:51:95:22:e2:f4:f1:3a:d6:be:be:d8:de:76:8f: 2e:e7:72:45:fa:ed:77:33:62:f8:d3:00:31:13:06: 13:50:5c:dd:19:4e:1b:4c:46:9b:a5:57:93:84:43: 88:14:ba:f7:3d:04:85:61:df:a0:5a:db:ab:ed:e7: a0:5e:1f:3b:7d:21:02:49:88:79:a2:49:49:4c:44: 94:fd:a0:4c:5d:94:29:f6:19:ed:f0:b6:78:19:a0: a9:f8:87:9e:18:fe:e4:ef:4c:c5:5b:a9:a6:9d:1c: 2f:ea:57:a0:b6:82:38:68:72:e3:4f:a1:a7:3e:bb: d5:0c:7d:65:f8:59:8b:10:ab:da:99:f3:66:9c:0f: a1:48:30:02:5c:9a:b1:20:5d:fe:50:2f:9d:20:bc: 0a:b2:53:3a:fa:f7:86:5d:74:c6:94:5e:4a:d4:23: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:6C:B7:16:A8:AE:60:8F:69:76:2E:3A:EC:B4:A5:F1:AA:A1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9787dda9-9271-309a-9152-58bbbdcc1f7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9b:1f:3b:19:2d:f8:d8:91:9b:4e:e0:f5:52:50:88:cb:0c: 4a:2e:59:3b:73:05:66:72:26:74:72:f6:9d:e1:61:29:91:79: c2:d7:2c:0f:34:d5:b6:92:e4:4a:04:82:94:c9:df:b5:f4:5c: 89:18:c1:d4:19:7c:2b:3f:28:82:71:42:c6:f3:b2:f1:5f:80: d1:78:09:b6:19:8f:97:80:1b:36:1e:a2:0b:dc:83:f1:00:1f: cb:42:49:4e:4d:7e:a8:00:48:f7:60:5e:a8:6c:86:a1:87:64: eb:45:a0:cc:bf:2a:bb:97:e8:6a:6c:0e:7e:0d:a2:d5:87:ee: 3b:7d:1e:eb:94:60:cd:b2:38:3b:0a:a3:83:19:3e:a0:35:fc: 2a:dc:d5:ce:c0:64:3f:c6:5c:49:ed:aa:67:e2:72:73:ef:7e: b5:89:10:b4:b9:1a:91:7f:3b:47:0c:4c:8b:7a:15:89:6b:74: 3d:5b:d9:65:8d:cc:5f:8f:0f:62:29:de:14:88:79:78:91:25: 36:3f:fc:63:26:ec:e4:48:ef:ae:d6:8e:33:9c:4d:60:75:5e: 1b:4c:39:fa:91:a8:76:b5:53:c6:c9:23:85:72:ee:30:e6:6b: 40:de:7f:e6:c5:99:52:1d:9e:a2:09:cc:ba:84:b6:86:e9:16: 61:f9:7a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmtu8jtUEfcuBMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdmY2M2YTctYzI0My00NTg4LWIwMjAtNjQ2ZjU2ZGFhNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpntvxEDaOIsUvJPpRTEv2Z5p1Cd6MrlE3pG xW4QNkrS0qbQ5Xf1pZbo24VhRANF2DQrwk1ePJ8D+cMl6m8P9g4+rB4nrdKjLQgO cMzU7uvIu4hmKKljXj7ZUZUi4vTxOta+vtjedo8u53JF+u13M2L40wAxEwYTUFzd GU4bTEabpVeThEOIFLr3PQSFYd+gWtur7eegXh87fSECSYh5oklJTESU/aBMXZQp 9hnt8LZ4GaCp+IeeGP7k70zFW6mmnRwv6legtoI4aHLjT6GnPrvVDH1l+FmLEKva mfNmnA+hSDACXJqxIF3+UC+dILwKslM6+veGXXTGlF5K1CNv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa7bLcWqK5gj2l2LjrstKXxqqEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTc4N2RkYTktOTI3MS0z MDlhLTkxNTItNThiYmJkY2MxZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWbHzsZLfjYkZtO4PVSUIjLDEouWTtzBWZyJnRy9p3hYSmRecLXLA80 1baS5EoEgpTJ37X0XIkYwdQZfCs/KIJxQsbzsvFfgNF4CbYZj5eAGzYeogvcg/EA H8tCSU5NfqgASPdgXqhshqGHZOtFoMy/KruX6GpsDn4NotWH7jt9HuuUYM2yODsK o4MZPqA1/Crc1c7AZD/GXEntqmficnPvfrWJELS5GpF/O0cMTIt6FYlrdD1b2WWN zF+PD2Ip3hSIeXiRJTY//GMm7ORI767WjjOcTWB1XhtMOfqRqHa1U8bJI4Vy7jDm a0Def+bFmVIdnqIJzLqEtobpFmH5ek0= -----END CERTIFICATE-----Generated at Wed Jul 29 15:24:07 2026 by rpki-client